v1.16.11

## Agent Deck v1.16.11

Terminal session manager for AI coding agents.

### Installation

**Homebrew (recommended):**
```bash
brew install asheshgoplani/tap/agent-deck
```

**Quick Install:**
```bash
curl -fsSL https://raw.githubusercontent.com/asheshgoplani/agent-deck/main/install.sh | bash
```

**Go Install:**
```bash
go install github.com/asheshgoplani/agent-deck/cmd/agent-deck@v1.16.11
```

## Changelog
* 06f72a12511cd558d43ec2e41480b178befc6371 Apply suggestion from @boyvinall
* d70c2832d53b69434cf4c9d93f39d7cb3cba0320 Exempt __complete from the generic help-consent test
* 4cfca95d7dc06bb4abad327db2e3f66ed2bdb8e2 Final polish: CHANGELOG creds-refresh credit, dependabot-automerge lint test, wire CI
* ad324373e0aaa84feb69c197acfbd015cf364834 Fix NewShellWindow default window-size to match session-creation default
* 7c4d6d2e5fcb7b7228d826aa6051842161f72a16 Fix TestToolIconColor_RegistryMatchesLegacySwitch: add muse to legacy expectation table
* bd01c518868dc2fd68b79c87f7f255f4b924aa05 Fix startFastDeathWatcher test call signature after carry/2279 param addition
* 954011fa45c7711b41b45e97f0a945907180fa28 Honor queued remote cancellations
* eaf3c55ef5f7aa32e9d2f69018d3de6acc73b4f0 Honor queued remote cancellations
* ba82953c1eb13369b066af01786cbc45a3796191 Make Discord typing best effort
* dc9ce3e4e9711fa29e08a2aba96460e141bbaf5d Merge PR #2047 into local integration
* bd79ce78acf791945ed1fb68a66a763e1e5b63b0 Merge PR #2095 into local integration
* 3a468dafb8215f78cade44a5c673ce0027e67734 Merge PR #2141 into local integration
* 6d703d7eb45029e83e6dbf483666a34689922f37 Merge PR #2142 into local integration
* 7294bc91a7c66f733ba1b289356144abf1fbf507 Merge PR #2146 into local integration
* fae07a2e2db54ac9dfaf444da0571665d4856b61 Merge PR #2149 into local integration
* 9aa9d06d8df772eed3fc2dbdaa7c970988cdcbf0 Merge PR #2150 into local integration
* ae249a8285f4107e5f2c001c40fcabe6f91ed119 Merge PR #2186 into local integration
* 3307d50d294b46dba58f81bb63858b21483dfd50 Merge PR #2190 into local integration
* dbc6e5cd127dbf6f89f0ad2f8d6b99e267ba3ef3 Merge PR #2192 into local integration
* ce3d64eb65168b298e31987f43fc8fa05bbc99eb Merge PR #2206 into local integration
* e5c4f7c6d1d27df20a9abf28dfd4cb443004a689 Merge PR #2207 into local integration
* 00dbe194cca9efc2a28d941fc52826df860da560 Merge PR #2208 into local integration
* 366f5449c1c81ef105ff75c27d6fcf050042eb43 Merge PR #2227 into local integration
* ef3c452afddad2f745083c71aff1b0119fef71fe Merge PR #2256 into local integration
* 373ad7cf93d6d5645bd404ade0f6a2effd0f9ec5 Merge PR #2272 into local integration
* 7cbf1131f6c02a88188a90bfcbce42d2f8e29e35 Merge PR #2273 into local integration
* d05d5885fb4200d82c35e2ab6a4abe07f05eca3a Merge PR #2274 into local integration
* 637829faa934d7282a734e6f1dfba78484c4f2bb Merge PR #2275 (updated head f7f45480) into local integration
* c21db863f36759752407095de7f56ba7566e86b9 Merge PR #2275 into local integration
* f1eb2f5f2633430a5054ba2b767396e0abf02ec4 Merge PR #2277 into local integration
* d79bf27087d91ee51aa9f0754765745f08d4314c Merge PR #2280 into local integration
* 4a68f1638735db8a297d9fd87d0440f676ce9096 Merge PR #2287 into local integration
* dcfb6d3724fa42b8e84c349b62bd72bf73238360 Merge PR #2288 (212ff3b8): nonblocking remote polling + SSH cleanup
* edc52e5ecca364117fecd9a4acd373aaab59163d Merge PR #2290 into local integration
* 389826133f4a7e8b9a79c1f76c092c55c61a1d86 Merge PR #2291 (fbd1537b): remote update --from-build
* efe11a502f56ecbfa71399f799266756ac3420dc Merge PR #2298 into local integration
* 9028f66d44f395dc5891436c6db1e846ecac2f81 Merge carry-e/2100 (0a5f1279): #2100 socket-send transport rebased onto e, Codex acceptance fence kept
* f5eb7b4f8cceb641f0075ebcf8925d6512e0c904 Merge carry-e/2118 (5429c177): #2118 rebased onto e (settings-panel/home.go conflicts resolved there)
* 97f02656eb4b31d9adc57f46b63a356a0089c34a Merge carry-e/2224 (e8b1d765): #2224 rebased onto e (Codex completion-turn preservation)
* 76f26f68e3ae1c4f0e15486d5295a1974e443c37 Merge carry/2051 into local integration
* 1e7a6025dfac7eef183bba7eefb6a9afd3d5baec Merge carry/2052 (own PR, rebased onto release/v1.16.11-rehearsal)
* 82f042213b2ce6df22cc2f7d15ee0df1bf266096 Merge carry/2057 into local integration
* 561da2e4027b7f0096b02b658a3d6e62f0de825c Merge carry/2072 into local integration
* c277c292750ea7c433d45330e78e827f3959e7c5 Merge carry/2085 into local integration
* 6fcdcc69d6bdc9c218fc7f2cac90fa0faef5e1f8 Merge carry/2111 into local integration
* 121a6cfbf43389266cfc520e5d96caf3709f5ae3 Merge carry/2120 into local integration
* ed3adb767a9bf40c049de239c585daf4ae63a402 Merge carry/2145 into local integration
* c61c430ae699b5cf650daf8b24a6e9d398aeef3a Merge carry/2154 into local integration
* 612f375088317b19f021cb79fae524d5ca8d52f2 Merge carry/2207 (fcc88500): restore bare-array remote sessions --json default, add --with-errors
* f91a351f669ab3a691eb55061ee7ab6fe2c47778 Merge carry/2229 into local integration
* f3a4a14a8e69dcbe82c3080af4f7a24ff22e698e Merge carry/2230 into local integration
* 44858a8d45f98ae4625f926a05b5d5714e7f470e Merge carry/2279 (rebased head e03b2ed7) into local integration
* 586f48bdcc9c0d7f3883171c5392009105c6e6a9 Merge carry/2289 (d9ea2cbf): runtime health metrics, rebased onto #2290
* a1b567bc8c226c54737b9591ca0e779b56a5b879 Merge feat/remote-version-preview into local integration
* f9099dcb81887c4730cc1716398e96d401861289 Merge fix/issue-2025 into local integration
* 548a851c05d60cd9c95bea27f2a3701375b6c995 Merge fix/issue-2185 (e538e6e9): classify open AskUserQuestion/permission menus as interactive-menu substate
* 454ec454d4647eb6a3bc19544183cc7cc7b359d1 Merge fix/issue-2202 into local integration
* 279c45ecfe7a6b87aa30c56af26c9ca46afa9e80 Merge fix/switch-stale-destination into local integration
* 096e4ade3f69dacdda250661f188803f878eba81 Preserve remote session JSON errors
* 1cf17bfe2afd9ea3e70a004209aaaaf7e9165c7c Preserve remote session JSON errors
* a64433eab058a73b375bc72a92d296e80af187ce Regenerate golden TUI fixtures for the muse builtin tool
* 61d692cf2a347d899aa13bb0bcbc6138152a9d3d Revert "Merge carry-e/2224 (e8b1d765): #2224 rebased onto e (Codex completion-turn preservation)"
* 05c1a8cf9b7ba3924c10c56ed94af9434851b9d2 Revert "Merge carry/2230 into local integration"
* 7d3e9c5ce635e34c596578b1e7d5131a30f17917 Update cmd/agent-deck/completion_cmd_test.go
* 5a9c1d6aa19cabf9904b8be8af6137037956186f changelog: note #2091 in rc.3
* 525919d92459627eec3f30129a8bb8bb9c1a2d1d changelog: note #2102/#1892 in rc.3
* 03797cf621cf0a6d97334846c674d638b99dfc50 changelog: note #2299 in rc.3
* 6e9c5e6f3a65b22ada3e364ad8e8923c865c7ac4 chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1
* cbd584d351512112677e263b037dc4a3776ccbd1 chore(release): fold rc.2 branches
* 26265b7592dd364338f1a2da83c1c017ea4cc1cb chore(release): fold rc.4 content
* d08c4325569525fb01e01d6d589dd2bcbb498308 chore(release): fold rc.5 content
* f9f82bcd164cabdc851bc8347e473dc9863e46e1 chore(release): fold rc.6 content
* 6ecbc262e48b53223380c68b180e4c0d2f2d6034 chore(release): v1.16.11
* 26eff81e2218f724d4ff45f333babfbfa212dc84 chore(release): v1.16.11 changelog
* 36a15808b0e5d7ed839d914e401b006afaf2427e chore(send): probe only under --wait, drop the dead gate wrapper
* aa00ef70bfe5a0df5a9bc236ffa8325650a33f31 chore(tasks): mark the preview-scale plan done
* 0e348cdebc2e458cc559308d7bc2dba174478dbe chore(web): bump sw cache, record group parity rows, refresh baselines
* 8266d43b2f2e28d342d607da3712d4d3af525c1d ci(deps): auto-merge Dependabot patch and minor bumps on green CI
* 805694a8923003b6f569f4c1cbe6a437b5b12ed2 ci(go-test): name failing tests and flake status in the job summary
* 08757d3d82b8a9acd0f228a203b1a4401a2df1a9 ci(hooks): keep the undo red proof independent of the search golden
* 7f358d8ea1136b05f4b9caa991f344922a9f0009 ci(hooks): warm the cleanup image from every checkout it tests
* c3d40a18d894af804acba6e4cc632106e03482cd ci(lighthouse): recalibrate total-byte-weight budget to 387000
* 1a96a454a05e33ef0e4b58ce8cbffd377ab1f6da ci(python-compat): run the stage report tests
* 09974c4f749af2e8245dbf675e2a473a95a31e69 ci(runtime-health): anchor the perf red recipe by content, not history
* e9c2f5d80d3ad2e128354fff53fcb546fa9905f1 ci(stalled-notify): reconcile against the live PR head and all gating runs
* 19cb5f977e1f0d14532266c9369d8f2b0a1ca83d ci(structure): advisory sentrux delta on PRs
* 152c6421bf7203fbd2ed596398ac8d41af8a7637 ci(workflows): surface PRs stuck in action_required
* 6229af382ae993ece99beef456bbc494cc5863a6 ci: apply container VCS setting to the checker invocation too
* fdefdc4ab8eb2f8ee0342f4a3fe42a02ffbe8766 ci: clear the release eval gate and the non-required checks after v1.16.11 (#2305)
* 61066e1f1659dab712e6e83f109c71ce1cfdb597 ci: distinguish fleet measurement failures from advisory regressions
* 3a17e38bacfaeda8b4d700bf8e153b5be3b303a0 ci: support disposable Docker checks across runner ownership
* 272c3a5e606ec3d798296040d3f2e42168b3aacb docs(omp): advertise TUI fork support
* a75f202b3b43362fa953fd3a55ff74aa0dc53420 docs(results): rc.5 verification report
* b48bb18d2a8d879654e4c193e19d770a7beded8b docs(results): rc.6 verification report
* 0795b5cbe3e9ebf0ac1971e95de89ecd2af17429 docs(send): describe what verifyPromptConsumedAfterLaunch actually checks
* 4d798c2204c143cc5febf4059c99d8c3cfa38b0c docs(skills): describe Codex project support
* c163aa02e4722b17bb54fb44efe05ce518f04771 docs(skills): refresh agent-deck/fleet/session-share against v1.16.11-rc.2, add evals
* 96140df7bab6d9115836a3381ab810f436a1c66f docs(tui): give the copy keys their own home and reconcile the shortcut reference
* c23ce6f0e1a58fec1fb25677ffd7c4768f1b81bf docs(ui): describe explicit embedded session selection
* 3fdae93752d169be2f8ea8eb1d86f22f32f33bdb docs(ui): scope explicit selection to embedded pane switching
* 2a023a5bed13408d70207058b34d6895a136c826 feat(cli): add --primary window targeting to session output and send-keys
* 1b6136a04d949ad9483296d407957d0343ab0174 feat(cli): add bash, zsh, and fish completion scripts
* 6b451e56908c4395b19783b392979c8b5eeb7a4a feat(cli): expose codex_session_id and resolved_codex_home in JSON output
* eb26bbf69abb7f0a2efd1e611156c892f9c586b7 feat(conductor): add pi as a supported conductor agent runtime
* 15ef629d2e6189e4e4385c40371dc647f22e5ddc feat(conductor): record per-PR stage timestamps as JSONL
* e710abff6a880b2f5cdedabec9077220667ed220 feat(conductor): ship the GitHub event watcher as an opt-in daemon
* aa578989bc3e3d6b935b6de0316a98de2c88bce3 feat(config): add send_transport key
* 16a0ce647f65336920a1a88f12b326f13446cc39 feat(config): directory-local .agent-deck/config.toml overrides for [worktree]
* 2fbfb5b7bf73d7b722f9114f8c71b31df61ec4fa feat(ctxinspect): `session context` — measure a session's fixed startup overhead
* b0dba684fa857d1b8b5a36408c806dfea13420bc feat(health): per-session event journal and session metrics
* 4d9ff2c05d7f2caca31d26833e1367f8c494d089 feat(hooks): wire the accounts usage feed into every slot's statusLine
* e2fa154de35bb72c245b32a8d98182c4a66ef9c0 feat(inbox): inspect unresolved records without consuming them
* 4d004184928c1a6cdcfd57c241911979fb95808e feat(inbox): manage dead-letter records from CLI and TUI
* 7168f133664b0fbfee206788bb888ca78e815de1 feat(inbox): manage dead-letter records from CLI and TUI
* 6fc5255c2b29a99c288bef596ba6c72a8bbb1199 feat(omp): add OMPSettings config, command/env-file overrides, icon
* 293ff4307010ca38150ebfb551ff2653a0e70020 feat(omp): add omp command builder and launch/restart dispatch
* 55f9ebde9dfbd637ea4e0e5739f80a9e45d90426 feat(omp): add omp session forking
* 39066020d52ee8d0ce9a9aadc5e6e57e65379dcf feat(omp): register .omp/skills as omp's project skills directory
* 92104bb4f53a65a087bac6377a29ad9918d60922 feat(omp): register Oh My Pi tool detection and status patterns
* 271d1b52964d87cdaef62abb103dabe112ff1b85 feat(omp): wire omp into TUI icon/color/setup-wizard/visibility surfaces
* 80a1c493566c269ddf458d62b7b4fdfdc22f8126 feat(pi): consume hook status for pi sessions and add pi-hooks installer
* de9b285871a79e7f44adf533a8f03ac341bf06a4 feat(quota): add the Z.ai/GLM provider and `agent-deck usage --refresh`
* ca45db4ccf942bbc315be97f22c774a08f70a14d feat(quota): report Claude subscription quota via `agent-deck usage`
* db47aa4160939d6de593f55e180e99c5363dbb8c feat(remote): show remote agent-deck version and live stats in the preview panel
* 3d35dc69f0d68b49ce948be60269a2543d0ca0ea feat(send): deliver to Claude targets over the messaging socket
* 8fe8a9b5f7fc970e018999146583a729b1b0069a feat(send): report --wait on a busy socket target as explicitly unverified
* 7295141c67024b14732254241361676cf3fef267 feat(session): alternate-session toggle and MRU walk (#2058)
* 307f8c2f7d8c56cd773d46efac11a388d3df99d2 feat(session): cap agent-boundary output
* 80cf77556a235d15f38024e8211a931c9c4ba688 feat(session): context-level controls (none/primer/full) and session primer inspection
* fc72fa23c43fda544bd1c51eb05a383f0273222d feat(ui): add accounts field to remote preview panel and header
* ed64702e3d41c9cf495786662b4a3f2eb1a2ca09 feat(ui): add embedded terminal layout
* 3def49f16f5f8fb5cf780738bb252f2b664b4fed feat(ui): configurable sidebar density for the embedded layout
* f55d40978a6c0d273e6d12d8245bf2ed61db66ed feat(ui): fzf-style fuzzy path suggestions in session and group dialogs
* d633cc54b7a5e6966aeda7ead5c236ae45a35cec feat(ui): kill tmux windows from session sub-tabs with d
* 97e9092961ea044b45b6562d5844143b47915bcb feat(ui): make remote preview panel and header content configurable
* af611d493c04aa9b92afd863853a403d02fb0ef6 feat(ui): opt-in ssh field (who is connected over SSH) for preview and header
* 0e02d24c6543110c3fe46c5ce29bf0f00870e659 feat(ui): source tool icon and color from the tool registry
* f529968cfc6b428923bf38a15baec01bb5e579a4 feat(ui,cmd): golden-frame test and CLI parity for kill-window confirm
* a1e0a3f8f90e9ec2967f04c366329adbad35feff feat(web): add selectedGroupSignal with mutually exclusive setters
* 0c5b431481c8c2e74fe96d9c3ec7508c7c408350 feat(web): compute group status breakdown
* ddd901ee36a42793b0512eddfa72a8e4894dc511 feat(web): derive new-session defaults from group context
* ac0cb3fbb9ecaed6adac483c8ca55c886371e0a8 feat(web): derive sidebar rows from lifted filter and collapse signals
* 67285a1fc969b8a7fc9dc02c2fd41891b4ba2e76 feat(web): give a selected group a URL
* 63718f1da0f9e960400862d55ad9418d1663080d feat(web): navigate group headers and collapse them from the keyboard
* b18bef42ddd88e4b03c258bd21e9afe95baa6ddb feat(web): project group defaultPath, name and level into the client model
* c834e81809db0688cc1f265e2c998c2d189ea7dc feat(web): select groups from the sidebar, chevron owns collapse
* 0d8787c7d6afc4dde97037dbeff1b27c22077bc5 feat(web): ship group defaultPath in the menu snapshot
* d09b559174c167ce11b43a01c3da5597c06935ba feat(web): show group stats in the main area when a group is selected
* 31a48412eae750611a137a28cf259f3a522e5fab feat: add an isolated functional build check suite
* 6ec836da35c9270957197509fb69ee923593840b feat: add isolated synthetic fleet performance suite and baseline
* 48573a165e1a8c218849e3107c196de2542e788a feat: add local runtime health metrics and budgets
* b4b17f2672254ea2a39333432cee6be53f3200ec feat: add local runtime health metrics and budgets
* 212deb8d9b9671d0ff6726cd17aa40abdcd603f6 feat: add muse code cli as builtin tool with resume support
* bb213d54c6f1ac00d7b6b35d0ea4b9835283de5a feat: install verified local builds on remotes
* a84dd31a40e29f391640b0322cfec4ec61d680bd feat: negotiate remote creation fields and forward dialog options
* 78f8c3ee75e20e63a9e4f264fdb63229e3ff09b7 feat: switch account and harness for remote deck sessions
* f04e685b984fa427f13ae3c3b5bb926b46b3952d fix(#1981): bound consecutive heartbeat skips + tighten picker detector
* c5217c5d70379b437c72fdb4dcc335af523327c3 fix(#2080 review): anchor picker detection on the last footer in scrollback
* fa3fb290a1cb9f00d7eba9d1bdb752a962482219 fix(#2080 review): gate heartbeat on hook-driven busy/interactive state
* f8bb30dc1dcae7eaa210672f2ed9ea9995d1a18b fix(attach): dismiss tmux's config-error view so the attach pane is live
* 8b95356b0637d4d543c0eddeaaf3aa52a2d4e0f9 fix(build): share truncateCell after main rebase
* d440f6ccbc3b222e87b010b7f104a397866a98f4 fix(ci): apply maintainer's review-hold revisions to structure advisory (#2148)
* 369a561c33e6e06b7b693a2316eed09c3a8c30a9 fix(cli): accept "shell" as an alias for a plain shell session
* 2ce180bf68586dd1f0f8ee490a28b66b9383f11f fix(cli): confirm before reconciling a session that is still running
* 9a781888c6509927bda30c98d7f4cd32a63ab429 fix(cli): defer to non-TTY refusal instead of shadowing it
* ac626d0ea648beb6b49ea0516e523191696014d7 fix(cli): list --json prints [] when there are no sessions
* 90a3c613becd7d9a749ba7634103b44891b1feb2 fix(cli): notify-daemon and remote add still mutate on bare trailing help
* 47de41e4b28e5a846df3631e3162fbd34a9ffa2b fix(cli): overview names its reconciliation line and lists a small inventory
* a80dc9eaf98a3d985f97e7f59bd390bb86ea5e5c fix(cli): refuse to open the TUI for an unrecognized command on a non-TTY
* 6e4d891d20e0e41dc2e28c0d1d941f8fdfdd69d4 fix(cli): remote sessions --json prints [] instead of null for zero sessions
* 0ee2428768e442377dcaa17036729d2e499f4d52 fix(cli): treat bare trailing help as help for creds-refresh (#2025)
* ee7bd31420cf062db4179f75d2a9ce9579214f97 fix(cli): validate --group/--select before the no-TTY gate, not after
* c2ecfb1249ba92a82d8b899f8d4c49d5a95b6ed4 fix(cmd): release the embedded terminal on every exit, and say what Enter does
* 2b6dd821a60a4c509fce35725d77a3a074e16adb fix(cmd): structured JSON on session window close refusals
* 178314a3b601a46c887e9e8fbd04f0524fd01249 fix(cmd): wait for terminal restoration on concurrent exits
* c04fac64016a674f56b2d6f1c98bd4febbf6a17d fix(codex): recover from an empty hook status file and log a refusal
* bc7709b6e3a828da5f9f89c2e4d0285802f03a10 fix(conductor): correlate late Codex replies
* a2b415614c6a950426af66817deaba698a210ba0 fix(conductor): make shared AGENTS.md agent-neutral for codex/pi collision
* 8f9d1f8a8de15778bfd0129805bd4174b82958fd fix(conductor): recognise the v1.10.x migration generation too
* 58b597fe7bf8262f58074c0899290d11204ee7a1 fix(conductor): release waits and migrate guidance
* 5d3193ab5746a154e96c40d4a0163c7aa9f0e092 fix(conductor): retain edits across generated template migration
* 844dbc1b7a588c0ba0d24ec0cd6bfbd8363c99f7 fix(config): bound dir-local worktree values to their own file, not the shared workspace boundary (#2093 P1 round 3)
* de230c29bf69447582e289b395a22e51dbe5b85b fix(config): bound untrusted dir-local worktree location/template (P1)
* 98a4d1deaece53a29e7001cf5b529b58604bf35e fix(context): flag over-limit readings, mark inferred windows, fail closed on the conductor /clear (#2026)
* 6e4b084a9bd30371b8e42c01281d2442ae28dfd5 fix(context-levels): correct precedence docs, add config/CLI reference, gate remote session primer on older controllers
* 36e902c020894e6e12de7af26ae4d6355c4ef79e fix(ctxinspect): address adversarial review findings
* 6c790f6952e8af58132954a716ea94928267cf4e fix(ctxinspect): reject available-with-cost by its real contract, name the drifted file, rename the footer
* 17b54667ab32cfa36b756c2981ac650ebc8ddfe4 fix(dead-letter): hash raw scanner bytes for purge/retry matching
* ddcad7d31c01ca95b3fab87937a28cfcb2d8a1ec fix(dead-letter): hash raw scanner bytes for purge/retry matching
* 7036b6d068c4f5022c1dfef95bcc5f5093af73c1 fix(dead-letter): reconcile carry/2230's DeadLetterRecord with #2111's (#2062)
* 345cbcdadb327bd82b2d82d45e38463df1887f38 fix(deadletter): exclude _unowned from purge; add --json to retry/purge
* 01216e521f3592456eb050d90d91771c82128d64 fix(done): accept CLAUDE_CONFIG_DIR, account slots and worker-scratch as transcript roots
* de9e52d93116e7e42d0be756977f3a088173870a fix(done): accept conductor and group config dirs as transcript roots
* 5266ae747fe0aed161aa72ef9046733ba0dd8fe9 fix(hooks): handler checks the installed Stop form before draining
* 6fc6fd40afc9b1122c2390709c124e9c267b6c9d fix(hooks): lossless settings.json rewrite, pin only known install dirs, read-only status
* eff19835149d12ee9472186d35d4b4a66d3f2383 fix(hooks): pin Claude hooks to the installing binary; status reports PATH shadow and version mismatch
* 87e668c8f9289d6236c67f124138070f2538518e fix(hooks): pin a stable binary path, self-heal stale entries, keep draining marker-less Stop hooks
* bdd44a47d18531dad7e452b6ee836db5b3f5e6d9 fix(hooks): usage feed wrapper never fails closed; refuse slots it cannot wire
* 9ae3e6ac233ee9a29d57392b8f27f177c286b8ec fix(inbox): finish discarding an oversized line across buffer refills
* 0c8dc332c2e9d465202e744c6d714cc28de18fcd fix(inbox): take the producers' flock in the drain and every sweep; keep _unowned out of the TTL sweep
* bc6f58ab2d6e98d8596ed0f8ff67f72d111065a7 fix(inbox): tolerate corrupt and oversized JSONL records (#2057)
* 7563cbaf4b8877effdd40fa2a53a8f9068b98a10 fix(launch): cover the --no-wait verifier's own truncation blind spot (#2079)
* eafc6bd1903567ec51d2092c532b5f3a95e3204f fix(launch): pre-accept Claude Code's folder-trust dialog on launch
* 365d3df2a92ff25c25bf42446f2f75c73b8d0b83 fix(launch): report spawn death instead of paste-buffer error when pane died
* eb3ccb99d74dc15fc254eae42607f123339f08d1 fix(lint): clear the golangci findings on the release branch
* 769d1ebc41b3fcba7e7b598b451ac10252fa1fa1 fix(lint): mark the two remaining os.Environ pass-throughs
* db9111a8e7cf9a0a29d291dc4e83a88abc457baf fix(notifier): deliver to any registered parent; child_removed is log-only; inbox drain exit 4 only with --strict
* ffb0efd0dcbbc926f90b87b110fe1b3534016337 fix(notifier): nudge subprocess timeout covers the send lock wait
* e547f25d90e576623a559083522c49a8c53b1227 fix(notifier): re-probe the parent's status in the wake-nudge idle gate
* d87b48e933d24bf40d0ab591c7fa08c7932c1d09 fix(omp): add omp to Settings dropdown, Tool Visibility Panel, and New Session preset list
* b9acf59dd7d813bfdb868f279cb06f4387891ee4 fix(omp): add omp to Web UI Skills pane tool-support list
* 88ced0a0e94b14850d51f6b06205617e82b22da5 fix(omp): close verification gaps
* 790882a816e4c818518804a8fc4324e38d3dc2e9 fix(omp): close web-UI picker gap, sync fork-support docs, fix doc comment, add approval-mode test
* a48d524da14b5db26ff02fe39d29a051d7336ed7 fix(omp): complete readiness and model support
* 9a9810d66e0a5c53cdb90d4af251c51c214d29d9 fix(omp): honor CLI fork and configured command
* 7a76fe7fab61e1dbc1c4a67258295e7d7190e33a fix(omp): implement OptionsPanel interface on OMPOptionsPanel
* 629482616c56e2272a1a73fa2cf03cb11481124b fix(omp): sync docs-table test and golden frames with rc.6
* 9d12c91ffe96398805e902780f79aa91763496b1 fix(omp): unify fork capability gates
* a0a94a6cf4ef9c799bb61e489710f826b6f5fc5d fix(omp): wire native --append-system-prompt identity injection, regen stale goldens
* d575e8f1e32c0a7cb6dbf7d42f6abcc58524d773 fix(output): preserve UTF-8 through ANSI stripping
* f44937930f5e63c16f69f65444411e6aecc20067 fix(pi): route every hook-status gate through the registry; order pi's emit
* 8a4f866377a76a4ee6dcd9ef0e871132f3084d14 fix(procowner): close the review holds on the #1873 receipt: identity-checked walk, pidfd signals, fail-closed unverified spawns, deterministic tests
* 27ad3b9b590154b756483ac235a1f87e6e3ea4b1 fix(procowner): refuse rather than raw-kill after a failed pin; mark a live pane whose pid is unreadable; enforce the receipt handshake in tests
* b357170a19e48943e4b1e1e0ae5129902600e321 fix(release): merge fixups for the rc.8 composition
* ce17746dc32985cf40c1f84813ab6639a9955d05 fix(remote): close review gaps in poll lifecycle and TUI state
* 2ff44c9c4c17f61441d1bd658ec070b5e3e4ec00 fix(remote): forward 'session context' through the remote passthrough allowlist
* fdaeded4b2f4d7d595e9fbf6d25ae50101e46539 fix(remote): forward skill detach and skill attached
* 43250cd307cba52c70433d57e5135b46aa19ad4e fix(remote): honest version/stats labels when builds differ but release matches
* fcc885006f6c0aa29d24a92a967504db3d05ec39 fix(remote): keep `remote sessions --json` a bare array by default
* f7c649e0b7dc19ed5ae9b09b4c336028b4fd718f fix(remote): keep polling and SSH cleanup nonblocking
* 87cf89e544f4366ec464d4420160676793fa8bc9 fix(remote): preserve cancellation context and fetch invariants
* ae1ccc7c43c1047e105abdd7b3c19233a979a1c5 fix(remote): preserve legacy creation on older remotes
* 3f166a16b371e4821ee9f7b6e8566a73b6eb4a9e fix(remote): preserve legacy creation on older remotes
* f7f45480ee235cde017fcf4230ed05a96d13ad32 fix(remote): refuse legacy multi-repo before creation
* d870e41f92913dcff6af18ad2f7a4b62e9243971 fix(restart): import the transcript from another config dir instead of launching --session-id blank (#2269) (#2)
* 6ec849a038740a87ae00f04a4c411f3e1ec2d1d5 fix(send): address turn delivery review findings
* 38a097d41349b71d5618ecac6fa2224adbe77afb fix(send): bind wait and stream output to turn identity
* b3ca5e932fac2a923b1297f926815316edea79a2 fix(send): compare paste marker with hard line breaks, not line count (rc.3 P1)
* 3599655352f66cb2c47ad1a29a8dc043befab280 fix(send): consult the hook busy status before interrupt recovery
* 3cba92c80620f931fa8122b89072b2fdc412e11e fix(send): count trailing paste-marker breaks; guard session send (rc.4 item 4)
* c14ae7a415d50a47ad0cceebc8d5e518ce552e1b fix(send): detect a truncated launch --message-file paste before submitting it
* 13da96d648b910cd2e1ab131f36c00f09ca0be4c fix(send): make the busy probe tri-state and read the hook-driven status
* 053b2e6d311a07606861472f10f4d82cb8b0d2b5 fix(send): make the socket transport opt-in, defaulting to tmux
* 5b524964fa0efd78d86446a06230450f8c002f6d fix(send): recognise the queue placeholder as the composer element; keep empty attributed replies (#2273 round 2)
* a290bcc2aa7d2e3e1ccb9b450ad0d7ee527a739c fix(send): refuse a truncated transcript instead of replaying from offset 0
* dc54fdeff98803211a81a92d50f04ff8422c4db1 fix(send): report a queued delivery on token movement and bind --wait/--stream to the turn (#1978, #2043 round 2)
* e86b7155a52dfc376d8fcffcc3ff8d6fc4437690 fix(send): report a socket write as unacknowledged, not submitted
* e70571e670e230ff0a66cd695bbc4c85fc820d9e fix(send): report queued only on Claude's acknowledgement; harden turn identity and stream boundary; attribute bridge replies (#2273 review)
* 0e605eb45af496267817be607dc8d7550a38e8f3 fix(send): require the startup-window prompt to persist before typing
* 435b8ca5c26a85c4f7b033e5b002212b9bc78dcc fix(send): resolve the socket target per instance, not per session ID
* afe7e0b1847ebad69d2db9b26ea2e3bd7beb6d94 fix(send): restart the startup-prompt run when a poll cannot see the pane
* 114ab244d8dccb27904bd69ad97eafb27bf17158 fix(send): serialize concurrent sends to one target with a per-target lock
* 0a5f127967030a8f69aaa80df8dc746790412f2a fix(send): tag every socket --wait as unverified, including the idle path
* 83554594444a3bc5dcceb4c3bd81195907802f39 fix(send): three-outcome delivery verdicts; never "NOT delivered" without evidence (#1793)
* 6dd1f7e171412f04ad443e321698edfb28423f70 fix(session): a wrapper owns the pane, so type no export line into it
* 7fdd7a46d92d9049b57d0bbcfd1453e7bbfe0b05 fix(session): address round-two output findings
* 95417161e747c4de838357ca2c10f6b7ea005de7 fix(session): bound distinct pending turns
* 66f8973d2a8387f34f2c3a072cbe1693113c8cf0 fix(session): close ownership review gaps
* 2837fd4118d08bbf853747617896a96e7d5d9e01 fix(session): consult hook completion before classifying a vanished pane as error
* 6c179d9df16a91b44e6f95012b60dfb097f71163 fix(session): decide "tool not found" in the pane and prepend only safe dirs
* 859d86171d2f15bff0e1f3f0b3e9e86ba296e77d fix(session): decouple session-event journal writes from the daemon hot loop
* c9d327aff6c89950a877d68940edf9e7f385e430 fix(session): document the output budget, bound the read log, keep ASCII fast
* 1af3f4be13c32499c068f021b07840c73a99fee2 fix(session): don't let #2303's own-file gate block /clear rollover recovery
* 7e97a4c652a34ba580464b09d446984a889228ab fix(session): find Codex turns beyond output tail
* 7862c88dfb15c15215df510c1f440038d7d4d639 fix(session): give plain shell sessions the agent-deck environment and identity file
* c5bc21e4fc9d24aa73085b9ad0fe4bba13e2c93f fix(session): hand the attribution goroutine its logger and prober
* 920dcaefa62b0a9b4304daffd3116e094f4544f9 fix(session): harden legacy Codex identity hydration
* 85d0448b30e180866a3414e8bf91a9a0e8db3a11 fix(session): hydrate legacy Codex identity before send
* 600fca8659e6e50cbb82b04dd1d6691b80c48fc8 fix(session): journal `session send --wait --json`/`--stream` after their own verdict
* d3f4c08bd2eb7a2de09a1adf7c6b9d2cb3ce46b8 fix(session): journal `session send` after its verdict, not before
* 46a478f9e96cde7be988347f75985b3558f1aad3 fix(session): let a replacement take the replaced row's group slot
* 931f02e3554d26c14935811f5a629684b51adcc3 fix(session): make the pending-turn bound correct and observable
* 35366ce46d1703abbda9b27200820d1cfd3c341f fix(session): make the receipt CAS cross-process and cancellation authoritative
* 3b2499174c9e2efe154acdbb71c02e1d4660a393 fix(session): normalize Codex lock timeout
* 4af87a44b3db8f87de627e98ae8332d81ed8aaeb fix(session): own wrapped process trees with a spawn-time receipt (#1873)
* a8879059040228c9f2239a84ad02a8aca1da83e0 fix(session): persist restart to owning profile
* 2d1ef041f3927e08d9c35c93f2caf8075273924f fix(session): persist restart to owning profile
* 5d6197ded2071f0f43d84626675d68b06403526c fix(session): preserve Codex turn identity for deduplication
* ff2f23940f6c35731cd447cd2b10fd1957364739 fix(session): preserve Muse resume IDs as literal arguments
* e8b1d765aa153f79b2fb5f4a70e087500df12ade fix(session): preserve distinct Codex completion turns
* 67c4b27cc62e972320c4e6a64ceb2d4bf17927f8 fix(session): prevent cross-session transcript fallback
* e14a0f29e59e4161d8e23da9b872fe76928dd37c fix(session): put the user's bin dirs on every spawned session's PATH
* f98e5b23862ffd58483e394cde97d1067b6723b6 fix(session): rebase the #1873 ownership receipt onto v1.16.9 and prove the pane-loss contract end to end
* 53162d39386720980ce96dcfdd03f98acafc7c3f fix(session): reload the resolved profile before computing cross-profile order
* 01f01df446802eb7d63dcb55d60c185c5c4dbfe8 fix(session): retain every distinct completion turn
* 3b5fb759cb6405b35422523aa2f6b1710877c712 fix(session): retain watcher lifecycle tracking
* e03b2ed7f010fa345135c8df289814650e044f77 fix(session): skip accepted-turn poll on non-wait Codex sends
* b0f017ec56bc3759ee9aad650b38645ed85f5aa1 fix(session): skip bare -c when no transcript exists for continue mode (#2301)
* 9a91c74dde373f941194a27b6eb409330d092f89 fix(session): stop leaking unrelated transcripts into session output
* f6fe4df93aa040843d72ad0e2b7d0e7bc74d45a0 fix(session): stop misreporting a user turn's string content as a parse gap
* a00886105f189f6e12f903231e92736aa9f400c9 fix(session): treat an indeterminate session probe as unknown, not absent, when the pane pid is unreadable
* dcf6dc50067a8db794b4baa87094a22d87c0a0a9 fix(session,health): bound the Claude project dir lookup; report append close errors
* 409ea44fdd1cb37f763edd1cbbef91236d4732a9 fix(status): accurate lights and substates for the six audit defects (A–F)
* b9deda0add6a69c67ab27951022fb93d7905dd2d fix(status): round-2 review findings on the status-light fixes
* d618882e8520f8846e07c08d7e65a5c953550d33 fix(status): round-3 review findings on the status-light fixes
* 0c4b9e98502d8fcdd17317eb2499f52d8bcda36a fix(status): round-4 review findings on the status-light fixes
* d5665f12251a19e51f7093362fe8b1a8224035a3 fix(status): stop hook-less codex sessions sticking at running in fresh processes
* da653c13cf72b7339d426395b4fbd22552621fcf fix(switch): persist account atomically, archive stale destinations, unblock retries after a failed journal
* 7ffc6d7fccd4be464b13a09e00ac637fc2a7327b fix(sysinfo): run who under LC_ALL=C
* 4aeb69916e6b64f9bf9f0a72c5ebf45a1145c31e fix(test): rename ctxinspect assistantLine helper to avoid collision after rebase
* 007ba3386a4cf047dcec755476d81fcb3f028d56 fix(test): update health.Start call sites for the binaryVersion param
* 4836da5c9bda6baa2c596a6dcd44f24b59eddc46 fix(test): use testutil.IsolateHome/IsolateTmuxSocket in ctxinspect TestMains
* e40fca9b93eba74c5519d2aea7821aed6aaac657 fix(tmux): apply aggressive-resize to windows opened by hand (#2259)
* 7bf78510746192865291735d30260a98ccfa9a5b fix(tmux): apply the window policy to hand-opened windows without shadowing user hooks (#2259)
* b998b15d58065f52e17f5067879e4bd6d7364b49 fix(tmux): assert the pane's own cwd instead of trusting the server's (#2214)
* 98511b3a2418d87a46fb4ea3e1a1576a140891c7 fix(tmux): bound pane respawn mutation
* f34e53967943f390b4093b7a908a5accf1cd67e0 fix(tmux): bound stalled startup handover
* 16d72437226ea805e1445aa19e3efeaf7336e29e fix(tmux): bound the viewers cache, honour [tmux.options] on every attach path
* a5c242676a39d03736b4211a0689801dc2bbc8d2 fix(tmux): cd-assert before the pane-cwd guard on the shell-tool path (#2214)
* 45678025bcd0cf1f58f99776d2ba2aefa64be831 fix(tmux): detect pi 'Working' banner as busy in headless status probes
* e538e6e9b3de5632170ee155c3ec9444ee530697 fix(tmux): distinguish an open interactive menu from idle-at-empty-prompt
* 9906634d9a5a5eb7427675705587c56f86fcebdc fix(tmux): make last-window kill guard atomic and bounded
* 25fdff67fafa5b6a7d3522241daaaa1d53d24977 fix(tmux): recover startup timeout status safely
* 042e8a359976fb72ba5c85f51bcb0ad0703cd06b fix(tmux): retain sizing policy for Deck shell windows
* 4ceb119dc2e3779102d403a7b6dee5883e7543cd fix(tmux): scope startup timeout to pane generation
* 90947f76fa16ea5dbbe3d3234ca611e3a2e25499 fix(tmux): shared attach follows the active viewer; viewers indicator
* abf325516b2c7410596d2f78a7997ca362f6c778 fix(tmux): validate timeout generation on return
* e6308f125fc339fa5524a23e4fd298ac85159e89 fix(tmux): validate window policy overrides, respect a foreign hook slot, add tmux-hooks uninstall (#2259)
* 9ca112572702a333ec51aa3f932868ad42b562f8 fix(ui): activate every embedded row by mouse, and page by drawn height
* b7a75395bfd8de4d56f7f8e2e96bcedf12ad3e42 fix(ui): address embedded terminal review feedback
* 12dd4800ffe78e46c01662812e7ca0957a4b5f4e fix(ui): adopt upstream VT hyperlink correction
* ee82b4f79de9458f708bb39a38ac2364fac409f1 fix(ui): align embedded navigation with rendered state
* 7de71abbe58c848eae866b056189bcddd3d5ce8d fix(ui): apply a saved embedded_terminal change at the next launch
* 069b52900cc7b70896a41d68406f860b9caf463d fix(ui): cap OSC 52 clipboard payloads before decoding
* 5429c1772446e13128e73b583e6fb2169dd987e0 fix(ui): correct settingsCount after carry-e/2118 rebase conflict
* 87dd40705d2741c0b18fa532e323836af1b6736b fix(ui): discard unread input after embedded writer failure
* d286e204f6ccb031ee70fdfc58a00c71a5cc7dc2 fix(ui): fit the remote preview stats block to the pane; scalable accounts table
* 0c37e639aa0c5dff36175b0fa8510844347538db fix(ui): force UTF-8 on the embedded tmux client
* cb31325b481a820d958b762ff823a2a49462e003 fix(ui): forward embedded terminal OSC 52 selections to the host clipboard
* d0323a44c695fe38716adcfdd806c67a597c3151 fix(ui): give remote-group header rows a width budget (finding 12)
* ee518d1717a1e627ff2030189e097afa0b8da2a8 fix(ui): keep keys typed while the embedded client connects, off the router lock
* 4c2f8a7c16e3f8d1d1b1216c9b69939546bf7aa6 fix(ui): keep the remote's error record when a dialog-created session dies at spawn
* 4f4cd31ff86d2aef82621758efd4f0fd7f26bd3b fix(ui): keep the sidebar viewport still while the cursor moves up
* 9fdead7d6bae7c94312cc8a6a3a08cfccaeaa52c fix(ui): kill-window confirm re-verifies tmux window identity at confirm
* 3a70761f0d0cc9af1b1a74b711d9d9781aaa4f2e fix(ui): legacy remote's New Session dialog offers all built-in tools
* ff24b1cafdb779c421394af656009901372df8fc fix(ui): make the split divider grabbable, and stop it sticking
* 609dd85c47f9ffff49216a3dadaed4f3d6cc89f5 fix(ui): never re-prompt for hooks a CLI install already made
* d9936fcf01afd3c8a9162d0cbfa3864eda69da4c fix(ui): preserve custom tool identity and command override during quick-create (#2199)
* 87d9827caf97f33ba4960d856c5acf6821be5844 fix(ui): preserve custom tool identity in quickCreateSession (#2199)
* 0d4c1c96730e0494f1e870e49e807bcd8ddb4755 fix(ui): preserve raw input across embedded attach generations
* 37748ace10b4b76a30e46b4d43b001a9b0949170 fix(ui): preview clauses never overflow a continuation line; single-line fields share the row budget
* c84a405857a72edd2130e415d9256d4e3c7baacf fix(ui): recheck embedded input failure after raw reads
* 70e57605818dec59d2d6d1823acf4b166e4178cf fix(ui): refuse to kill a session's last window
* 8e535e229c79f136bbea2acd0c136ca63d4074b0 fix(ui): repair 9 rendering defects from the 2026-09-18 live UI audit
* 78addcbb1922e418161d3c05951a84c1984c6390 fix(ui): resize the embedded PTY when dashboard chrome changes
* 5eb1a335cf25215d16d03248198a9c9b1e94aa21 fix(ui): resolve executable command in quickCreateSessionAt for custom/cursor default tools (#2199)
* 2704bc17053c38424dad23ededb5e41fc07e30bd fix(ui): strip ANSI before curated-footer key/label substring checks
* bee821ff791fe1f601ad37403f758f20cfdc7ee5 fix(ui): unblock terminal replies before waiting for output
* 7f5deed79321b7424b971ae22a4caa19cf8425bb fix(ui): width-aware header layout, never truncate a field mid-text
* fb76a471bb966c2b4118d4eb79ea118fbae52587 fix(ui): wire ToolColor into GetToolStyle, the actual row-render path (#2136)
* a5cdff914e23b80a7eaa9682dbd9e42926fae92c fix(ui): wrap the Verify tab's measured-figure block instead of clipping it
* 7fb056cf3d84a11eb8d35d808c3d309130c30205 fix(ui,tmux): refresh the whole window cache after a kill, not just the killed row
* cece4643408d6dbf1b3a527e2740af90ed3ebac2 fix(ui,tmux,cmd): bind kill-window to the cached row's window id; CLI needs --yes
* ef731c82797be3dc01400d19d67f2c7188dd0847 fix(usage): bare statusLine wrapper passes AGENTDECK_PROFILE through untouched
* 8bdf33085525de642ec2f94bb20a8b98827efb5f fix(web): add the stopped status chip, bucket chip matching
* a4c80de00c0d233abdb0b9452d96f33f21e8f339 fix(web): address PR #2047 maintainer review
* 86e8333536b489695c3ce33d478784a0c958e39a fix(web): block shortcuts behind overlays, guard archived request order
* 72f33466e4cbd9adac175a4b49255524d2ef01b4 fix(web): close final-review gaps in group-selection parity
* bf95903a57e10901728afe18c95cc47489367dc3 fix(web): cold group/session links render, drop the Tab focus trap
* 5bfbf1f89a94aab5c4d9977279a5d56e304d0274 fix(web): create sessions in the selected group, prefilled from its context
* 9bda350520c8132c4add365c2875b18707d3db78 fix(web): drop the group panel's create button, match TUI's Name field
* db2bc707017ccd1ab47238d0aba70a44a864d81a fix(web): group panel shows archived sessions, matching the TUI
* 3b95ee2b81bd0442c4cb3fd74bf66ad0d057b416 fix(web): group stats panel status dots are invisible (no matching CSS rule)
* bdca3215d9fc206298b3806324419159a3cbd7c5 fix(web): preserve SSE retries after network loss
* d55909aeaaff09c532418b05a37405a8d7261fc6 fix(web): recover closed SSE streams after outages
* 47cbffaae0d921ebee5391f3b386795c2f657374 fix(web): size the shell by the measured viewport so iOS keeps the tab bar and the keyboard clear
* 52b6231377f775b5e33c885077f8539c497ebf90 fix: address PR review comments on shell completion
* fbe42765b42e5c373dd5fdae2fbffa82b9cda932 fix: address review feedback on muse builtin detection, resume, and discovery
* ef53722daaac7b1fb256dc3fb2122dd4e9302c02 fix: aggregate counts, remote model seeding, and outdated-flag audit findings
* 0167ec8985420292ebf4a78bf52fa4c906ec3cc4 fix: allow remote health reports and validate page size
* 48f3aca1b4558c9ed37e307558c3b26fd0be295c fix: allow remote health reports and validate page size
* 6574d29ef262f12648fc0233f9bc962779abfe87 fix: count ownership probes and verify hydrated status budgets
* 46eb059b20d7c53b376cf9889db39631022f2b0c fix: count ownership probes and verify hydrated status budgets
* 2d4d386a1684b0c2bd422fc39d46a865f236d6d7 fix: defer targeted hook cleanup outside TUI deletion handlers
* 2a7d439eb3343a64b9676cea6c1c69b5b51fa357 fix: derive remote message file parsing from creation flags
* 0cb1f95a4a3b7b728701b3c900277b00cd1f38b4 fix: follow build environment policy and align summary golden
* ff1ad56f818ae7f1b50a62c721ebd47db9d77c8d fix: gate heartbeat sends on open picker or unsent composer draft
* e9c087b0462cac3ecd2bc2388204043f403bfc89 fix: guard remote creation state and roll back failed startup queries
* a18007fed4b984ef221aa24065563e81ea225ab6 fix: health/doctor session_count on the tracked set, drop orphaned comment
* b96aa6bd3611b238a09e209162c3bf0d4ff8f228 fix: keep Codex ownership refresh outside status locks
* 67060e56c07a889803d0635f337e4028dec14447 fix: keep Codex ownership refresh outside status locks
* c624e27f4bfd6948d45201dd3488b5958f156a63 fix: keep Codex web status in sync
* af24dc2f918f47552ba31f5c2735b22a4942a79f fix: lint (gosec index shape, unused test helper)
* f234a1433cd05019fc91f6f3bd0d89d02923a130 fix: make remote creation argument bounds explicit
* 51895de4943a803bdd04bbce4b480504bbcb2358 fix: mark-unread (u) no longer reverts to gray on the next reload
* f771de8f1793ddc2bf8b1b7c5597dbc37092bdff fix: nil yolo inherits global config, tmux detection executable-only
* bf88f7ac8b30ea428ba23d281259a55c5453cfc3 fix: order undo restart after deferred hook cleanup
* d2f295fdfdc792e9aca2f028b512a7e856a97dd5 fix: preserve edits during generated asset publication
* f2e32daeb396a385f61ccb98b56d7dd8fa25134a fix: prevent multi-client tmux clipping
* b7885896cf8ac9b4004154c555f8d41eb16da56f fix: prune orphan hook artifacts and bound kqueue watcher descriptors
* 8cdd3306f7f21b5715c70482e11da6917d398967 fix: read current creation registry snapshots without initialization
* 6670ed7b1898f4f2d10734c8cd6de96664e8f7ee fix: reject incomplete functional membership responses
* f49623c7cd5fa546ae04c49dc9e5c9ddac395534 fix: report the committed source archive on a recovery-required switch failure
* f7c02f5c39e83c115d011831b48c49a41c84c15d fix: require live completion truth and atomic asset migration
* 654d874112cc2b3ca3747aed8423a0fd3369dc43 fix: require valid cleanup evidence and removed completion panes
* 142fbcdb7dc332e7ae80a4398c64fe2a2506db95 fix: resolve #2301 transcript check across account slots, protect header badge from base-stats overflow
* fbd1537b522ef5e32bdbfc938e188528341add82 fix: retain fresh remote probes when cache writes fail
* 4f6b51214637f5aaff06aaf3f123f76de48196c4 fix: run automatic hook pruning once per data root
* e329e61b6965a587de005b7cac176ca64beb50ef fix: session move migrates history across a --group config-dir boundary (#2086 follow-up)
* 3a6ee82c74cb22f9964c57307b178c2a21f502cd fix: session start acknowledges remain-on-exit sessions that died fast (#2202)
* 1fcc3d910fbbe03cf08c26e62b1f3b4873098c2b fix: session-list title width priority (#2201) and session move history migration (#2086)
* 0037be56695b3692ece8b043432e071c400ca032 fix: share Codex ownership scans across status passes
* fab0431024dc1a0bbb3121dd961746d43eb4ead6 fix: simplify creation parsing and load the remote catalog in tests
* e1945dccfe71942e4f8f5b448527f1696c594a8b fix: support atomic generated migration on Darwin
* 14a85ea401e6ffd5af630b70b618585eb2b1d708 fix: sustained health footer warning, remote drain help text, sample binary version, identity skills hint
* a091eac1785d8ad7656dfcad4a9db4ca5c492bfb fix: use fixture path helper and enable measured Linux baseline comparison
* c077791414f004df627cb4493bb59b8cad8c8378 fix: validate remote switch selectors, refuse missing target harness before any mutation, report source archive exactly
* f8d66e349b554b6c467e4202cea64a1dca2dcac1 merge: fix/final-polish-20260918 into rc.6
* 386dc1883e555e981b954848b59b45a045aa7228 merge: fix/issue-verify-gaps-r2-20260918 into rc.5
* 9cf0702b62737f7b86a82a87935176e10fadcf83 merge: fix/messaging-20260918 into rc.5
* b4912db0407b239fb35a3eced21a1bf910a11f6b merge: fix/remote-attach-20260918 into rc.6
* acf724543bd6b7b14bdf0418a1fed7ac6b91b314 merge: fix/remote-spawn-20260918 into rc.5
* 9961390493c24a3f25224329a23eca216bcb3b0f merge: fix/small-followups-20260918 into rc.5
* 44ce30c0105b44beaefb580ecdf5372aabc2f3ff merge: fold PR #2078 into rc.3 (send: startup-window prompt must persist)
* 481ae47136a82d2f42d3c266dd3664e5f573dca4 merge: fold PR #2078 into rc.3 (send: startup-window prompt must persist)
* 752169916f8a8a002505aa950a15f0e98c2e572f merge: fold PR #2103 into rc.3 (web settings visual baseline, #2056)
* e7bfba0ff1226414098c872de7de1b8dd91ad9ec merge: fold PR #2103 into rc.3 (web settings visual baseline, #2056)
* 108e45d2037920220edbd30ecdbb908a8c941c1f merge: fold PR #2144 into rc.3 (conductor stage timestamps JSONL)
* 2bef1235b67b9718b0a1eb057607fc508e98c15c merge: fold PR #2144 into rc.3 (conductor stage timestamps JSONL)
* b31caa3de375182fd94882e14dbf3d65cc61ab4d merge: fold PR #2211 into rc.3 (mark-unread)
* 8c5699204c1e620e05a65449096e3623b8c10353 merge: fold PR #2211 into rc.3 (mark-unread)
* 2188e4aa4f36f3fba43566615c02a07a96f9e6ca merge: fold PR #2217 into rc.3 (launch: report spawn death; fixes #2215)
* 4dc4252259e2d310ca8500732ba8c960046722cb merge: fold PR #2225 into rc.3 (docs skills)
* 5a9156220d9bb85d981e14314eb7680b86bf4fa5 merge: fold PR #2225 into rc.3 (docs skills)
* 162fa2a719acaf45f77386af2c798e301856dddd merge: fold PR #2248 into rc.3 (web iOS viewport)
* 29c9ffb88825fdabc310e10c0cadf1c7e1a315c5 merge: fold PR #2248 into rc.3 (web iOS viewport)
* fd7eefb13902ef680002f91ca2812b366b759e46 merge: fold PR #2257 into rc.3 (--primary window targeting)
* 45410dc263a3f33abbe7b4285f7261e48fb233f8 merge: fold PR #2257 into rc.3 (--primary window targeting)
* c7d2eff87f91f89525ba2296f1305bdc0af73e69 merge: fold PR #2282 into rc.3 (deps upload-artifact)
* c238f0017dba440aed13d807c483012b0852eced merge: fold PR #2292 into rc.3 (functional check suite)
* d925b32caefa04cb40869817d2e03143ebf253d3 merge: fold PR #2293 into rc.3 (fleet perf suite + baseline)
* d6bc1d081fa1dc3f9f4907c03b7ed4e979217b7e merge: fold PR #2294 into rc.3 (group activity aggregation)
* e58d6a6342ee888ed35194910eda062df278746a merge: fold PR #2294 into rc.3 (group activity aggregation)
* 6832c73e72a1f5df8743756a3efdf5ae08f0a243 merge: fold PR #2300 into rc.3 (replacement takes the replaced row's group slot)
* 4f7196089a4770c74add5f37795b87a5f81f1ab6 merge: fold PR #2300 into rc.3 (replacement takes the replaced row's group slot)
* 54c45d33a10ce0ef8d7399730aae7095aa4b180a merge: fold carry/2070 into rc.3 (#2070)
* 5c28c73d4056d34eb4986584679b738bc0a055fe merge: fold carry/2080 into rc.3 (#2080, closes #1981)
* a513a47c8b56bc62aaf970d6d29fa0d97622587c merge: fold carry/2147 (web panes/feature routes registry, closes #2137)
* 08a44374ddee27d2d995e241976b562c9d1f6dc6 merge: fold docs/skills-refresh-20260918 (skills + evals against v1.16.11-rc.2)
* 978b64ff29ccfce3954c81cb98e40cc3361fb903 merge: fold feat/session-metrics
* ba6fce79e88c53433666846a2f2293597fcb4928 merge: fold fix/2102-launch-trust-seed into rc.3 (fixes #2102, #1892)
* ba65e79fecfd8fc5ba57f0cca746b32cb346086e merge: fold fix/issue-2079 into rc.3 (#2079)
* 718e7eced676fe8e186685c0a4def52c62741515 merge: fold fix/issue-2091 into rc.3 (#2091)
* 5e2fbe93a2c1d8338e1c5e8cdb4caae4a37bdeab merge: fold fix/issue-verify-gaps-20260918 (#2025, #2136, #2301, #2062 help pin, tests for #1892 #2185 #2223, header layout)
* ce57d09679bb97d950ba59378cd98946612630fa merge: fold fix/launch-truncation-20260918 (P1 paste marker regression, rc.3)
* a7b7dd3f124e079825a84253ddf0f6b8cd776e49 merge: fold fix/session-output-identity-2299 into rc.3 (#2299)
* 758c0a605a0f30a38a08f7bc1da0272672e11532 merge: fold fix/status-lights-20260917 into rc.3 (status lights A-F, hook-lag, substate_detail)
* 8efef810ffea338934ea63bba1ae362f0cffbd29 merge: fold fix/tmux-server-cwd-2214 into rc.3 (#2214)
* 127246719ab0e1bcc76df83eba70a14380281cd0 perf(conductor): delete polling turns
* 359cdec444489ecab6916ebf6897a005baf33043 perf: aggregate group activity before walking ancestors
* 090c1b7a86a7829a3eb32f48a8eea241a47cfeaa refactor(cmd): simplify session window close CLI
* 993aab4699a8f5949ead53e72144b3139bfeb40c refactor(health): share journal validation and nullable formatting helpers
* 68c606f027ac188736a2ccafc2021eacda2a2c70 refactor(messaging): fold duplicated lock and env-prefix helpers
* 020cd49c198df616958803af27c349ca89a6fda2 refactor(session): name the local prelude test, compute the shell export gate once
* 0fb08d2ffb0be9e3e57a5867279c36fea58f850c refactor(web): register panes and feature routes in one table each
* b5bd358d2fbb809336167f47349d97e07c1052e6 refactor: extract PasteTruncationCheck shared by launch and session-send guards
* b71a2726777ec0cd298bed6223e4910cff8087db refactor: simplify #2214/#2062/#2148 changes (code-simplifier pass)
* cb57007eccced602f20ead37a5e698c5e1487383 release: v1.16.11 (#2304)
* 61321b2bfe431d84275e99a5be3d8c13607edbb3 test(cli): pin inbox dead-letter help to the actually-wired surface (#2062)
* 57ba1fc2f949382a967b5f01537479d0dcbd1b67 test(conductor): bind migration fingerprints to recovered source
* 46a1a9c455b3d834229fca12faec5e8d6cdfbfb5 test(conductor): exercise the real Discord on_message for best-effort typing (#2205)
* a5d648be2a5c5967f4341fe6bccc350ed4426768 test(conductor): pin migration recognition against the templates that shipped
* 9f9301643a94dbd76d9f7d34d2a842e66367c100 test(conductor): typing failure no longer aborts Discord reply path
* 80b340dbbf80ef6ad0fd495f6ee6b8d2965e547d test(ctxfixture): add a codex, unanchored fixture case
* cd517c9a48b9bd87e8b63855d29c59635b515932 test(eval): give the embedded evaluator a title that fits the compact rail
* 56da9691fb8776a44cff405d17006a29801fb99a test(eval): keep the Hermes hooks prompt out of the embedded and classic evaluators
* f32feca149a85a9181043b72dc7786601e6c2f5a test(eval): parse tmux client widths with printable separators
* 626b1115f181f0f31c308198616b5cf435b14a00 test(inbox): follow the collapseTurnRetries rename in pre-existing tests
* 49f276ac8217c146b1b117cd26dea0bfa29a676c test(inbox): remove the #2062 not-wired gap detector, retry/purge now land
* a734c0986e50f348005af5ecca4389989e2434c0 test(omp): scope session-dir host-path check past identity injection
* 18be841017469f6eef7a306836fdc3b474fb07fb test(remote): make shutdown regression observations race safe
* e7566d0dc88c05341f95f426cdb69e32702ebbb9 test(session): compile identity boundary assertion
* 10a2a21989f8edd2d557cb18775fb796e961cad7 test(session): cover completion-scoped fallback edges
* 1c5e7745b3f62bd04052fb689ee00641565c2d8c test(session): document and verify Muse trust policy controls
* 638ba7f191c8e0d9078aef7c80586c2327dd4d42 test(session): give each Codex signal path a positive control
* 099777959d8b724dca6937bd294211e88fbdba24 test(session): locate Claude matrix transcript
* 617b15f088a839e6b6430f97a60cfee6de7af58f test(session): reproduce distinct completion loss
* 3382e841b4fceb958e9f41fd268e7bdd0c783e3e test(tmux): verify respawn mutex release
* 364f31ee543087afd2f128469b64ac0bdd13bef8 test(ui): deterministic clipboard cancellation, bounded VT waits, remote-row notes
* cee6c625a12e59d4fdbe19624ff182455880fa16 test(ui): document RemoteSession inapplicability for quickCreateSession (#2199)
* 3de0ff349cf957f6ba7e5d3e112bebb360075b48 test(ui): exercise production embedded UTF-8 request construction
* 3c6a30a8e81a151798a09c537556629f170e8d99 test(ui): give every kill-window test its own tmux socket
* 6d835da3b6ecd45145b47d3db9c56e936a7e1edf test(ui): join decoder input before closing its pipe
* 9a8ae82f96e3a53cdfe7d4767128c462acb74cec test(ui): pin the rc.3 dialog flow for a remote spawn death
* 5b744a2a6339c608f8139c0205abafe23e2192ed test(ui): regenerate New Session goldens for the merged pill layout and omp harness
* 0f8d7501d31dff63d97970a7a59c34c9abc7a983 test(ui): require explicit embedded switcher choices
* c1c3695a7ee43513e34df72847079e979ae10ece test(ui): update hook-cleanup golden frame for the search box fix
* 4d8b3c2bc38ecda0473ea834b4b0bffa08f51ae9 test(ui): verify embedded UTF-8 on the updated contributor head
* 8c2a7d7d8d5bf34c3f3573f95250cff0bd0c28af test(ui): verify review fixes and hyperlink rendering
* 991ae1ee5683004a25b2060168a37b14c05d1ec8 test(web): add keyboard-only guard for n-prefills-from-focused-group
* d70c2087711b64aeba5a6728947642650935dab8 test(web): baselines from the CI platform, not macOS
* 209ee4ba61cf32861fc4df3edee874ff08745809 test(web): refresh settings drawer visual baseline (#2056)
* a50015d472d74e4c673b4d81bc1a025bcd00afcc test(web): regenerate shortcuts-dialog baselines on the real browser

---

**Full Changelog**: https://github.com/asheshgoplani/agent-deck/compare/v1.16.10...v1.16.11